Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.mft
File:                     40BEDF113EC28F27A4735C81592F01A9D8F44EF8.mft (raw, json)
Hash identifier:          nGBcd7yIE/OgWc6/EcYITObHsFyGjx39cZLiOSmx9/c=
Subject key identifier:   59:34:5D:C4:6D:E1:40:4F:ED:82:22:85:64:9B:78:D9:34:99:1F:6A
Authority key identifier: 40:BE:DF:11:3E:C2:8F:27:A4:73:5C:81:59:2F:01:A9:D8:F4:4E:F8
Certificate issuer:       /CN=40BEDF113EC28F27A4735C81592F01A9D8F44EF8
Certificate serial:       34076124970E31BAA0A0304B04F2405A649E62CF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.mft
Manifest number:          7C
Signing time:             Sun 02 Aug 2026 07:47:10 +0000
Manifest this update:     Sun 02 Aug 2026 07:42:10 +0000
Manifest next update:     Mon 03 Aug 2026 11:05:10 +0000
Files and hashes:         1: 40BEDF113EC28F27A4735C81592F01A9D8F44EF8.crl (hash: gtROkbOohHksU2HRLug5+wMdi4ocgMTmND47+znw17Q=)
                          2: 3136302e32352e3131362e302f32342d3234203d3e20313533303739.roa (hash: jxc7vQHdOIHycwiO9oNFG6v0dLybRsunkkDru5UJgoI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.crl
                          rsync://rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:07:61:24:97:0e:31:ba:a0:a0:30:4b:04:f2:40:5a:64:9e:62:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40BEDF113EC28F27A4735C81592F01A9D8F44EF8
        Validity
            Not Before: Aug  2 07:42:10 2026 GMT
            Not After : Aug  3 11:05:10 2026 GMT
        Subject: CN=59345DC46DE1404FED822285649B78D934991F6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d9:26:8d:4a:41:68:b5:85:36:92:fd:ce:53:
                    d8:9f:05:f0:c5:0a:27:4c:16:b2:55:14:5b:7a:3c:
                    9f:cc:0c:84:ba:f6:2f:e1:6a:b1:f3:39:79:95:2c:
                    f5:8f:7b:67:90:fd:bf:9c:18:dd:37:4a:e2:c1:08:
                    cc:fe:25:33:b3:51:41:f0:02:a1:c4:d7:67:b2:d4:
                    9d:20:8b:37:a3:1a:50:de:2b:d9:69:19:26:f5:12:
                    4b:8f:01:4a:17:90:19:d6:eb:f9:5f:88:43:11:61:
                    e3:ab:c9:8f:4a:d0:11:23:fc:56:99:a2:3e:df:21:
                    82:93:a9:20:2a:d7:35:1a:05:e1:66:24:c9:8b:30:
                    bf:bc:d2:e1:e8:72:7a:93:86:19:aa:94:66:ab:33:
                    dc:97:d0:cd:cd:be:b2:11:7b:e4:c0:a0:70:d4:59:
                    33:50:0e:19:c0:22:b8:01:40:b5:1a:18:d5:b0:f1:
                    21:2d:cc:e2:57:98:6c:09:b3:d5:b9:4e:d3:6f:e2:
                    81:bb:5d:15:fc:75:f2:14:56:a6:f8:55:d4:c9:b2:
                    b1:49:06:36:93:d7:29:d0:bf:d3:08:a3:b5:77:7f:
                    68:dc:67:87:9b:79:fc:d9:64:af:5d:ce:66:fb:03:
                    50:56:94:e8:a8:18:94:4c:90:5b:6d:29:49:73:9c:
                    a4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:34:5D:C4:6D:E1:40:4F:ED:82:22:85:64:9B:78:D9:34:99:1F:6A
            X509v3 Authority Key Identifier:
                keyid:40:BE:DF:11:3E:C2:8F:27:A4:73:5C:81:59:2F:01:A9:D8:F4:4E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ed:f8:cb:42:03:62:a8:c9:22:9e:ad:5a:83:fa:8b:7d:94:
         94:92:54:d8:08:1c:88:37:b5:c8:76:75:5b:2e:1f:ad:68:b4:
         b7:d8:14:82:5c:d6:af:55:5c:f0:eb:3f:62:cb:65:52:e2:dc:
         15:eb:9a:e8:a3:d0:40:f2:cb:ee:b8:9b:89:aa:eb:30:70:41:
         6e:d5:1e:8e:73:f9:3c:d5:c4:75:0e:14:42:b9:74:e5:9e:c0:
         cc:98:a9:de:d9:c3:66:cd:57:f7:2b:1d:43:a8:bf:1e:78:bf:
         19:7f:4e:a2:7c:30:32:16:fa:d3:84:4e:87:b3:d0:5e:01:3e:
         35:e9:ac:87:3c:e1:c4:6a:24:2d:36:46:a1:a1:c0:9a:f7:a2:
         95:e2:ea:50:1d:5f:6a:9f:58:1f:45:25:37:46:78:6c:e7:da:
         13:f1:e9:41:ff:0b:bc:ec:07:2d:d4:b5:13:6a:f1:b4:a1:f3:
         15:a9:3f:ef:ff:55:62:fc:3a:08:50:e8:00:fe:03:39:5b:de:
         df:37:96:e9:45:5c:36:0b:66:3c:c5:7e:ea:7d:ff:c9:21:85:
         63:3a:da:9f:83:df:d5:b4:3c:cc:34:5f:94:ea:4e:5b:bf:99:
         a2:7e:c2:3d:58:68:41:7e:d5:a1:ed:e6:b1:f4:97:05:5c:f5:
         10:04:9e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 20:35:42 2026 by rpki-client